abs63[.]vip

The domain abs63.vip was registered on 21 February 2026 through NiceNIC International Group Co., Limited and is currently resolved to the IP address 188.114.97.3. The IP belongs to Cloudflare, Inc. (AS13335) and is geolocated to the United States. The site serves its content over HTTPS using a certificate issued by Google Trust Services under the WE1 intermediate, and the HTTP response code is 200. The page title returned by the server is “ABSURD SAMARA - Главная”. Technology fingerprints captured by passive scans indicate the use of Vue.js, Cloudflare Browser Insights and HTTP/3, confirming that the infrastructure is hosted behind Cloudflare’s edge network.

The domain appears on a single public blocklist and is explicitly listed by the PhishDestroy blocklist provider. Gridinsoft’s trust scoring system assigns a score of 0 out of 100, reflecting a high confidence of malicious intent. VirusTotal has recorded two detections out of ninety‑five scanned engines, reinforcing the suspicion of abuse. The authoritative name servers are brit.ns.cloudflare.com and darwin.ns.cloudflare.com, both belonging to Cloudflare’s DNS service. The current operational status is marked as active, and the threat classification is generic phishing.

Analysis indicates that the observed infrastructure—Cloudflare front‑end, a modern JavaScript framework, and a low trust score—matches patterns commonly employed by phishing operators to host credential‑harvesting pages while obscuring origin. The limited public visibility (only one blocklist entry) suggests that detection coverage may be incomplete. Defenders should add abs63.vip to URL filtering rules, monitor DNS queries for the associated Cloudflare name servers, and enforce TLS inspection to capture the underlying HTTP payload. Network sensors should flag any outbound connections to 188.114.97.3, and endpoint security solutions should treat the domain as malicious based on the existing vendor detections and blocklist listings.